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WHAT IS CLAIMED IS: 



1 1. The method comprising: 

2 a) providing a component for backing up and restoring a single or plurality of 

3 directory service objects; 

4 b) providing a component for delegating security privileges to permit access to 

5 directory service objects; 

6 c) providing a component for retrieving data in policy storage format and 

7 representing said data in human-readable form; 

8 d) providing a component having a graphical user interface including a display 

9 capable of searching and reporting policy storage data in human readable form; 

10 e) providing a component capable of replicating a single or plurality of 

1 1 directory service objects across the domain tree boundaries of said directory service; 

12 and 

1 3 f) providing a component for analyzing the effect a particular setting will have 

14 on a particular target represented as a directory service object before the setting is 

15 added to said directory service. 

16 2. A system comprising: 



17 



a) a component for backing up and restoring a single or plurality of directory 
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service objects; 

b) a component for delegating security privileges to permit access to directory 
service objects; 

c) a component for retrieving data in policy storage format and representing 
said data in human-readable form; 

d) a component having a graphical user interface including a display capable of 
searching and reporting policy storage data in human readable form; 

e) a component capable of replicating a single or plurality of directory service 
objects across the domain tree boundaries of said directory service; and 

f) a component for analyzing the effect a particular setting will have on a 
particular target represented as a directory service object before the setting is added 
to said directory service. 

3. The method of claim 1 wherein directory service objects include users. 

4. The method of claim 1 wherein directory service objects include computers. 

5. The method of claim 1 wherein directory service objects include printers. 

6. The method of claim 1 wherein directory service objects include a directory 
service component with a descriptive parameter. 
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7. The method of claim 1 wherein the back up component facilitates the storage 
of object settings, links to directory service objects, and security information 
regarding directory service objects. 

8. The method of claim 1 wherein the restore component is capable of restoring 
archived data to a single or plurality of domains. 

9. The method of claim 1 wherein various levels of security privileges can be 
delegated. 

10. The method of claim 9 wherein the levels of security privileges that can be 
delegated include the ability to configure the entire policy object or the ability 
to configure only one or a plurality of administrative templates contained in 
the policy. 

1 1 . The method of claim 1 wherein the policy data is stored in a database. 

12. The method of claim 1 1 wherein the database where policy data is stored is the 
registry. 

13. The method of claim 1 wherein the directory service objects include back up 
components. 
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